A user writes
I am evaluating Complete FTP on a server running server 2008. I can connect over ssh fine with a non-windows user account, but I am having problems connecting successfully over a Windows (AD) account.
The error-log shows the following error:
2009-09-16 16:38:34,976 ERROR User [55] Error while authenticating user Domain\UserName
EnterpriseDT.Net.FtpServer.Utility.ImpersonationException: Error while authenticating user Domain\UserName ---> EnterpriseDT.Net.FtpServer.Utility.ImpersonationException: Could not log on user Domain\UserName (LogonUser). Error was Logon failure: the user has not been granted the requested logon type at this computer.
2009-09-16 16:38:34,979 ERROR SFTPConnection [55] Error in authentication: Error while authenticating user Domain\UserName
This error is probably caused by the user-account being included in the "Deny log on locally" security policy.
To change this:
- Open Start -> Administrative Tools -> Domain Controller Security Settings
- Drill down to Local Policies -> User Rights Assignment
- Right-click on Deny log on locally
- Remove FTPUser from the list
If FTPUser is not in this list then have a look at some of the other policies in that list to see if they look to be related.
These instructions are for Windows Server 2003. It may be different on 2008.
